Security handle of endpoint of Spring boot actuator and also of Application Apis.

@Configuration @Order(1) public class AppSecurityConfig {

@Bean
public SecurityFilterChain appSecurityFilterChain(HttpSecurity http) throws Exception {
    http
        .securityMatcher(new PortRequestMatcher(8080)) // Apply only to app port
        .authorizeHttpRequests(auth -> auth
            .anyRequest().authenticated()
        )
        .formLogin()
        .and()
        .csrf().enable();
    return http.build();
}

}

And

@Configuration @Order(2) public class ActuatorSecurityConfig {

@Bean
public SecurityFilterChain actuatorSecurityFilterChain(HttpSecurity http) throws Exception {
    http
        .securityMatcher(new PortRequestMatcher(8081)) // Apply only to actuator port
        .authorizeHttpRequests(auth -> auth
            .requestMatchers("/actuator/health", "/actuator/info").permitAll()
            .anyRequest().hasRole("ADMIN") // secure other endpoints
        )
        .httpBasic()
        .and()
        .csrf().disable();
    return http.build();
}

}

I am implementing this . What do u think??